[backend] aarch64 workers can also build 32bit arm
[api] Do not enable enforce_project_keys by default for new installations
[webui] basic fixes for dealing with remote urls when adding source files

- git support is back
- filename handling fixed